@agent-cards/sdk 0.21.0 → 0.23.0

package/dist/preflight.generated.js

@@ -1,5 +1,5 @@
 // Generated from @agent-cards/payment-core. Do not edit.
-// source-sha256: 3a36f98936b5a93687dd4a052d1d4513935a093736b19475f023b5a0847c6b4a
+// source-sha256: 3adb75196b940ea807d3290f096e585d6519543d18ec6426daf8b0031acbacb8
 import { CHECKOUT_PREFLIGHT_CAPABILITIES } from './preflight-capabilities.generated.js';
 /** Advisory page discovery. These rules never admit a payment destination. */
 export const CHECKOUT_PREFLIGHT_VERSION = '1';
@@ -68,6 +68,22 @@ RULES.push({ id: 'fiserv-commercehub-payment-fields', psp: 'fiserv', kinds: ['sc
     sources: [fiservSource('https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js'), fiservSource('https://orangepay-ecommerce.hdpayments.homedepot.com/env.js')] }, { id: 'fiserv-commercehub-checkout-script', psp: 'fiserv', kinds: ['script'], hostname: /^commercehub-checkout\.fiservapps\.com$/, pathname: /^\/sdk\/[0-9]+\.[0-9]+\.[0-9]+\/checkout\.js$/, origin: 'https://commercehub-checkout.fiservapps.com', path_pattern: '/sdk/:version/checkout.js',
     sources: [fiservSource('https://developer.fiserv.com/product/CommerceHub/docs/Online-Commerce/Integration-Options/Hosted-Checkout/Hosted-Checkout-Version-Release')] }, { id: 'fiserv-secure-data-capture-frame', psp: 'fiserv', kinds: ['frame', 'iframe', 'document'], hostname: /^commercehub-secure-data-capture\.fiservapps\.com$/, pathname: /^\/sdk-secure\/[0-9]+\.[0-9]+\.[0-9]+\/iframe\.html$/, origin: 'https://commercehub-secure-data-capture.fiservapps.com', path_pattern: '/sdk-secure/:version/iframe.html',
     sources: [fiservSource('https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js'), fiservSource('https://commercehub-secure-data-capture.fiservapps.com/sdk-secure/3.8.14/iframe.html')] });
+// NMI Hosted Payment Page (formerly eKashu): the merchant's own entry form posts top-level to
+// live.ekashu.com, and NMI's card page is that host's root document (integration guide AE; the
+// archived card pages in test/fixtures/ekashu). NMI ships dark (its definition names a
+// capability), so the bundled catalog declares no support for it: these identify ekashu and the
+// result stays unknown.
+const ekashuSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-30' });
+RULES.push({ id: 'ekashu-hosted-payment-page', psp: 'ekashu', kinds: ['form', 'document'], hostname: /^live\.ekashu\.com$/, pathname: /^\/(?:index\.php)?$/, origin: 'https://live.ekashu.com', path_pattern: '/',
+    sources: [ekashuSource('https://www.nmi.com/wp-content/uploads/2024/06/Version-AE-eKashu-Hosted-payment-page-Integration-Guide.pdf'), ekashuSource('https://web.archive.org/web/20260307103902/https://live.ekashu.com/')] });
+// Verifone eCommerce, read 2026-09-25 from Verifone's own hosts and docs: a merchant page
+// that encrypts the card itself (Secure Card Capture) loads verifone.js from Verifone's
+// jsclient host for its region, byte-identical on every host. Verifone ships dark (its
+// definition names a capability), so the bundled catalog declares no support for it:
+// the script identifies verifone and the result stays unknown.
+const verifoneSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'verifone-secure-card-capture-script', psp: 'verifone', kinds: ['script'], hostname: /^us\.jsclient\.verifone\.cloud$/, pathname: /^\/verifone\.js$/, origin: 'https://us.jsclient.verifone.cloud', path_pattern: '/verifone.js',
+    sources: [verifoneSource('https://us.jsclient.verifone.cloud/verifone.js'), verifoneSource('https://verifone.cloud/docs/online-payments/securecardcapture')] });
 // GMO Payment Gateway PG Multipayment (dark: its processor declares a capability, so the bundled
 // catalog does not list it and these signals stay unknown until a client opts in). Token v2's
 // mp-token.js identifies the processor. Token v1's ext/js/token.js (a JSONP GET), GMO Elements'
@@ -98,6 +114,173 @@ const cybersourceSources = [
 RULES.push({ id: 'cybersource-flex-microform-script', psp: 'cybersource_flex', kinds: ['script'], hostname: /^flex\.cybersource\.com$/, pathname: /^\/microform\/bundle\/v2(?:\.[0-9]+\.[0-9]+)?\/flex-microform\.min\.js$/, origin: 'https://flex.cybersource.com', path_pattern: '/microform/bundle/v2{,.:minor.:patch}/flex-microform.min.js',
     sources: cybersourceSources }, { id: 'cybersource-flex-microform-field', psp: 'cybersource_flex', kinds: ['frame', 'iframe', 'document'], hostname: /^flex\.cybersource\.com$/, pathname: /^\/microform\/bundle\/v2\.[0-9]+\.[0-9]+\/iframe\.html$/, origin: 'https://flex.cybersource.com', path_pattern: '/microform/bundle/v:version/iframe.html',
     sources: cybersourceSources });
+// Juspay HyperCheckout: Juspay's own hosted payment page (the Session API's payment_links.web),
+// which a merchant embeds in an iframe (IndiGo's payment step). The card request that page makes
+// has not been observed, so the Vault does not take it over, and the rule tells the agent so
+// before it types a placeholder. Juspay is served dark, so no catalog processor entry backs the
+// candidate and the result stays unknown either way.
+RULES.push({ id: 'juspay-hypercheckout-payment-page', psp: 'juspay', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.juspay\.in$/, pathname: /^\/orders\/ordeh_[A-Za-z0-9]+\/payment-page$/, origin: 'https://api.juspay.in', path_pattern: '/orders/:order/payment-page',
+    sources: [{ kind: 'primary_source', reference: 'https://juspay.io/in/docs/api-reference/docs/express-checkout/session', reviewed_on: '2026-09-23' }],
+    variant_unverified: 'The Juspay HyperCheckout payment page at /orders/:order/payment-page sends the card from Juspay\'s own page, a request the Vault does not take over.' });
+// Pelecard Iframe/Redirect 2.0, reviewed from Pelecard's public payment page scripts and three archived
+// payment pages on 2026-09-25. The processor ships dark: until the bundled catalog serves pelecard, a
+// lone Pelecard signal names the processor and stays unknown. The legacy 1.0 page on
+// gateway.pelecard.biz posts the card as a top-level form and stays unknown through `variant_unverified`.
+const pelecardSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'pelecard-payment-page', psp: 'pelecard', kinds: ['document', 'frame', 'iframe'], hostname: /^gateway21\.pelecard\.biz$/, pathname: /^\/PaymentGW\/?$/, origin: 'https://gateway21.pelecard.biz', path_pattern: '/PaymentGW',
+    sources: [pelecardSource('https://gateway21.pelecard.biz/ManualIframe/Chart'), pelecardSource('https://docs.pelecard.com/documentation/iframe-redirect-programmer-manual-version-06-2025/')] }, { id: 'pelecard-payment-script', psp: 'pelecard', kinds: ['script'], hostname: /^gateway21\.pelecard\.biz$/, pathname: /^\/Scripts\/Payment\/(?:Payment|General)\.js$/, origin: 'https://gateway21.pelecard.biz', path_pattern: '/Scripts/Payment/{Payment,General}.js',
+    sources: [pelecardSource('https://gateway21.pelecard.biz/Scripts/Payment/Payment.js'), pelecardSource('https://gateway21.pelecard.biz/Scripts/Payment/General.js')] }, { id: 'pelecard-legacy-payment-form', psp: 'pelecard', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^gateway\.pelecard\.biz$/, pathname: /^\/PayProcess\/Transaction$/, origin: 'https://gateway.pelecard.biz', path_pattern: '/PayProcess/Transaction',
+    sources: [pelecardSource('https://gateway.pelecard.biz/')],
+    variant_unverified: 'The implemented Pelecard adapter covers the Iframe/Redirect 2.0 card submission on gateway21 and gateway20.pelecard.biz; the legacy 1.0 page on gateway.pelecard.biz posts the card as a top-level form and is not admitted.' });
+// ACI Worldwide COPYandPAY (Halfords), reviewed from ACI's own widget files on 2026-09-25. The
+// processor ships dark: until the bundled catalog serves aci, a lone ACI signal names the
+// processor and stays unknown. The widget script URL carries ?checkoutId=, which never matches.
+const aciSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'aci-copyandpay-widget-script', psp: 'aci', kinds: ['script'], hostname: /^eu-prod\.oppwa\.com$/, pathname: /^\/v1\/paymentWidgets\.js$/, origin: 'https://eu-prod.oppwa.com', path_pattern: '/v1/paymentWidgets.js',
+    sources: [aciSource('https://eu-prod.oppwa.com/v1/paymentWidgets.js'), aciSource('https://docs.aciworldwide.com/integration-guide')] }, { id: 'aci-copyandpay-card-frame', psp: 'aci', kinds: ['frame', 'iframe', 'document'], hostname: /^eu-prod\.oppwa\.com$/, pathname: /^\/v1\/pciIframe\.html$/, origin: 'https://eu-prod.oppwa.com', path_pattern: '/v1/pciIframe.html',
+    sources: [aciSource('https://eu-prod.oppwa.com/v1/pciIframe.html'), aciSource('https://eu-prod.oppwa.com/v1/paymentWidgets.js')] });
+// Hyp CreditGuard PPS, reviewed from the public PPS shells and bundles and the Redirect API 2.6 guide
+// on 2026-09-25. The processor ships dark: until the bundled catalog serves creditguard, a lone PPS
+// signal names the processor and stays unknown. The legacy CGMPI page identifies its family and
+// stays unknown through `variant_unverified`.
+const creditguardSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'creditguard-pps-hosted-page', psp: 'creditguard', kinds: ['document', 'frame', 'iframe'], hostname: /^pps\.creditguard\.co\.il$/, pathname: /^\/$/, origin: 'https://pps.creditguard.co.il', path_pattern: '/',
+    sources: [creditguardSource('https://www.creditguard.co.il/wp-content/uploads/2021/10/CG-Gateway-Redirect-API-for-PPS.pdf'), creditguardSource('https://pps.creditguard.co.il/')] }, { id: 'creditguard-pps-template-script', psp: 'creditguard', kinds: ['script'], hostname: /^pps\.creditguard\.co\.il$/, pathname: /^\/templates\/[A-Za-z0-9_-]{1,64}\/main\.js$/, origin: 'https://pps.creditguard.co.il', path_pattern: '/templates/:template/main.js',
+    sources: [creditguardSource('https://pps.creditguard.co.il/templates/cgt-basic/main.js')] }, { id: 'creditguard-legacy-mpi-page', psp: 'creditguard', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^cgmpi\.creditguard\.co\.il$/, pathname: /^\/CGMPI_Server\/PerformTransaction$/, origin: 'https://cgmpi.creditguard.co.il', path_pattern: '/CGMPI_Server/PerformTransaction',
+    sources: [creditguardSource('https://www.creditguard.co.il/wp-content/uploads/2020/11/CG-Gateway-Redirect-API.pdf')],
+    variant_unverified: 'The implemented CreditGuard adapter covers the PPS page on pps, pps2 and ppsuat.creditguard.co.il; the legacy CGMPI page on cgmpi.creditguard.co.il is not admitted.' });
+// Primer Web SDK v2, reviewed from Primer's public SDK bundles (sdk.primer.io/web/v2.63.0 and v2.65.0,
+// the @primer-io/checkout-web 2.65.0 loader) and Printful's add-card chunk on 2026-09-25. One host serves
+// the SDK for sandbox and production sessions alike; the session's pciUrl decides where the card goes. The
+// processor ships dark: until the bundled catalog serves primer, a lone Primer signal names the processor
+// and stays unknown. Primer Checkout (@primer-io/primer-js) loads its api-controller from
+// /web/hosted-pages/ and stays unknown through `variant_unverified`.
+const primerSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'primer-core-sdk-script', psp: 'primer', kinds: ['script'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/v2\.[0-9]+\.[0-9]+\/PrimerCoreSDK\.min\.js$/, origin: 'https://sdk.primer.io', path_pattern: '/web/v2.:minor.:patch/PrimerCoreSDK.min.js',
+    sources: [primerSource('https://sdk.primer.io/web/v2.63.0/PrimerCoreSDK.min.js'), primerSource('https://www.npmjs.com/package/@primer-io/checkout-web/v/2.65.0')] }, { id: 'primer-card-frame', psp: 'primer', kinds: ['document', 'frame', 'iframe'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/v2\.[0-9]+\.[0-9]+\/(?:hosted-input|api-controller)\.html$/, origin: 'https://sdk.primer.io', path_pattern: '/web/v2.:minor.:patch/{hosted-input,api-controller}.html',
+    sources: [primerSource('https://sdk.primer.io/web/v2.63.0/hosted-input.html'), primerSource('https://sdk.primer.io/web/v2.63.0/api-controller.html')] }, { id: 'primer-checkout-api-controller', psp: 'primer', kinds: ['document', 'frame', 'iframe', 'script'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/hosted-pages\/v[0-9]+\.[0-9]+\.[0-9]+\/api-controller\.(?:html|mjs)$/, origin: 'https://sdk.primer.io', path_pattern: '/web/hosted-pages/:version/api-controller.{html,mjs}',
+    sources: [primerSource('https://sdk.primer.io/web/hosted-pages/v1.1.0/api-controller.mjs'), primerSource('https://www.npmjs.com/package/@primer-io/primer-js/v/1.10.1')],
+    variant_unverified: 'The implemented Primer adapter covers the Web SDK v2 card tokenization; Primer Checkout (primer-js) sends the card from a hosted api-controller that gives up on the request after 30 seconds and is not admitted.' });
+// Payrails web SDK v6, reviewed from Payrails' public CDN files, the @payrails/web-sdk 6.5.0 loader
+// and Blacklane's static bundles on 2026-09-25. The loader injects
+// assets.payrails.io/web-sdk/<v6, or a build featureConfig.sdkVersion pins>/payrails.js, and the card
+// form mounts its fields as assets.payrails.io/apps/secure-frame/<v6 or x.y.z>/index.html iframes.
+// Only 6.x is matched, the body and JWE shape the Vault checks. window.__payrailsWebSdk__, the global
+// the bundle publishes, is page state rather than a loaded resource, so discovery never reads it.
+// The processor ships dark: until the bundled catalog serves payrails, a Payrails signal names it and
+// stays unknown. Once served, only the card-form save is covered, and it is conditional on consent.
+const payrailsSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'payrails-web-sdk-v6-script', psp: 'payrails', kinds: ['script'], hostname: /^assets\.payrails\.io$/, pathname: /^\/web-sdk\/v?6(?:\.[0-9]+\.[0-9]+)?\/payrails\.js$/, origin: 'https://assets.payrails.io', path_pattern: '/web-sdk/{v6,6.:minor.:patch}/payrails.js',
+    sources: [payrailsSource('https://assets.payrails.io/web-sdk/v6/payrails.js'), payrailsSource('https://www.npmjs.com/package/@payrails/web-sdk/v/6.5.0')] }, { id: 'payrails-secure-frame-v6', psp: 'payrails', kinds: ['frame', 'iframe', 'document'], hostname: /^assets\.payrails\.io$/, pathname: /^\/apps\/secure-frame\/(?:v6|6\.[0-9]+\.[0-9]+)\/index\.html$/, origin: 'https://assets.payrails.io', path_pattern: '/apps/secure-frame/{v6,6.:minor.:patch}/index.html',
+    sources: [payrailsSource('https://assets.payrails.io/apps/secure-frame/v6/index.html'), payrailsSource('https://docs.payrails.com/docs/secure-fields')] });
+// Elavon Converge Hosted Payment Page (NY DMV), reviewed from Converge's own page shell and bundle
+// on 2026-09-25 (byte-identical on the production and demo hosts). The processor ships dark: until
+// the bundled catalog serves elavon_converge, a lone Converge signal names the processor and stays
+// unknown. The page URL carries ?ssl_txn_auth_token=, which never takes part in matching. The
+// Lightbox modal and Checkout.js are named as unverified variants.
+const convergeSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'elavon-converge-hosted-payment-page', psp: 'elavon_converge', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/'), convergeSource('https://developer.elavon.com/products/hosted-payment-page/v1/take-a-payment')] }, { id: 'elavon-converge-hpp-bundle', psp: 'elavon_converge', kinds: ['script'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/assets\/hpp-[0-9]+\.[0-9]+\.[0-9]+\.js$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/assets/hpp-:version.js',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/assets/hpp-2.505.07.js')] }, { id: 'elavon-converge-lightbox', psp: 'elavon_converge', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/hpm\/?$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/hpm',
+    sources: [convergeSource('https://api.demo.convergepay.com/hosted-payments/hpm'), convergeSource('https://api.convergepay.com/hosted-payments/PayWithConverge.js')],
+    variant_unverified: 'The implemented Elavon Converge adapter covers the Hosted Payment Page; the Lightbox payment modal at hosted-payments/hpm posts to its own endpoint and is not admitted.' }, { id: 'elavon-converge-checkout-js', psp: 'elavon_converge', kinds: ['script'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/(?:Checkout|PayWithConverge)\.js$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/{Checkout,PayWithConverge}.js',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/Checkout.js'), convergeSource('https://api.convergepay.com/hosted-payments/PayWithConverge.js')],
+    variant_unverified: 'The implemented Elavon Converge adapter covers the Hosted Payment Page; Checkout.js and the Lightbox launcher post the card from the merchant page and are not admitted.' });
+// Worldpay eProtect: the vendor's JS API scripts, its iframe client and the Worldpay-origin payframe
+// identify the processor. While its definition ships dark it is outside the bundled capabilities, so
+// a page using it stays unknown here. B&H serves the same script from a domain it names itself,
+// which is identified and refused; any other merchant-named domain stays unidentified, because a
+// host wildcard here would make every card frame attributable to eProtect.
+const eprotectSources = [
+    { kind: 'primary_source', reference: 'https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js', reviewed_on: '2026-09-23' },
+    { kind: 'official_documentation', reference: 'https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf', reviewed_on: '2026-09-23' },
+];
+const eprotectScript = /^\/eProtect\/(?:eProtect|litle)-api[23]\.js$/;
+RULES.push({ id: 'worldpay-eprotect-js-api', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^request\.eprotect\.vantivcnp\.com$/, pathname: eprotectScript,
+    origin: 'https://request.eprotect.vantivcnp.com', path_pattern: '/eProtect/{eProtect,litle}-api{2,3}.js', sources: eprotectSources }, { id: 'worldpay-eprotect-iframe-client', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^request\.eprotect\.vantivcnp\.com$/,
+    pathname: /^\/eProtect\/js\/(?:payframe|eProtect-iframe)-client[34](?:\.min)?\.js$/, origin: 'https://request.eprotect.vantivcnp.com',
+    path_pattern: '/eProtect/js/{payframe,eProtect-iframe}-client{3,4}[.min].js', sources: eprotectSources }, { id: 'worldpay-eprotect-payframe', psp: 'worldpay_eprotect', kinds: ['frame', 'iframe', 'document'], hostname: /^request\.eprotect\.vantivcnp\.com$/,
+    pathname: /^\/eProtect\/payframe_[A-Za-z0-9]{1,64}_[A-Za-z0-9_-]{1,96}\.html$/, origin: 'https://request.eprotect.vantivcnp.com',
+    path_pattern: '/eProtect/payframe_:paypageId_:style.html', sources: eprotectSources }, { id: 'worldpay-eprotect-merchant-domain', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^paypage\.bhphotovideo\.com$/, pathname: eprotectScript,
+    origin: 'https://paypage.bhphotovideo.com', path_pattern: '/eProtect/{eProtect,litle}-api{2,3}.js', sources: eprotectSources,
+    variant_unverified: 'This eProtect script is served from a merchant-named domain, not a Worldpay eProtect host; only Worldpay’s own eProtect hosts are covered.' });
+// WSPay Components (WSPay's build of Monri Components), reviewed from the vendor's public bundles
+// on 2026-09-23. The processor ships dark: until the bundled catalog serves wspay, a lone WSPay
+// signal names the processor and stays unknown. Monri Components on ipg.monri.com and the WSPay
+// Form hosted page identify their family and stay unknown through `variant_unverified`.
+const wspaySource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-23' });
+RULES.push({ id: 'wspay-components-script', psp: 'wspay', kinds: ['script'], hostname: /^proxy\.wspay\.biz$/, pathname: /^\/dist\/(?:components|monri)\.js$/, origin: 'https://proxy.wspay.biz', path_pattern: '/dist/{components,monri}.js',
+    sources: [wspaySource('https://proxy.wspay.biz/dist/components.js'), wspaySource('https://proxy.wspay.biz/dist/monri.js')] }, { id: 'wspay-components-card-frame', psp: 'wspay', kinds: ['frame', 'iframe', 'document'], hostname: /^proxy\.wspay\.biz$/, pathname: /^\/v2\/js\/payment-method-component-dynamic\.html$/, origin: 'https://proxy.wspay.biz', path_pattern: '/v2/js/payment-method-component-dynamic.html',
+    sources: [wspaySource('https://proxy.wspay.biz/dist/components.js'), wspaySource('https://proxy.wspay.biz/v2/js/payment-method-component-dynamic.html')] }, { id: 'wspay-form-hosted-page', psp: 'wspay', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^form\.wspay\.biz$/, pathname: /^\/authorization(?:\.aspx)?$/, origin: 'https://form.wspay.biz', path_pattern: '/authorization{,.aspx}',
+    sources: [wspaySource('https://docs.wspay.info/wspayform')],
+    variant_unverified: 'The implemented WSPay adapter covers the WSPay Components card confirm on proxy.wspay.biz; the WSPay Form hosted page posts the card to form.wspay.biz and is not admitted.' }, { id: 'monri-components-script', psp: 'monri', kinds: ['script'], hostname: /^ipg\.monri\.com$/, pathname: /^\/dist\/(?:components|monri)\.js$/, origin: 'https://ipg.monri.com', path_pattern: '/dist/{components,monri}.js',
+    sources: [wspaySource('https://ipg.monri.com/en/documentation/components'), wspaySource('https://ipg.monri.com/dist/components.js')],
+    variant_unverified: 'Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.' }, { id: 'monri-components-card-frame', psp: 'monri', kinds: ['frame', 'iframe', 'document'], hostname: /^ipg\.monri\.com$/, pathname: /^\/v2\/js\/payment-(?:method-component-dynamic|component)\.html$/, origin: 'https://ipg.monri.com', path_pattern: '/v2/js/payment-{method-component-dynamic,component}.html',
+    sources: [wspaySource('https://ipg.monri.com/dist/components.js')],
+    variant_unverified: 'Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.' });
+// Shiji STS behind the MyCheck Wallet V3 (dark: its processor declares a capability, so the bundled
+// catalog does not list it and these signals stay unknown until a client opts in). The in-page
+// wallet (main.js) and the STS proxy script identify the processor. The wallet's iframe integration
+// (sdk.js, wallet-iframe.html) and Shiji's ps-js-apm library identify it too, but no Vault mode covers
+// them, so each keeps the result unknown through `variant_unverified`. Sources: the reviewed bundles
+// (sts.proxy.v2.1.js sha256 aee72b81...346ade84, wallet main.js 7d28c3bf...03580fdb).
+const shijiSources = [
+    { kind: 'primary_source', reference: 'https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js', reviewed_on: '2026-09-25' },
+    { kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js', reviewed_on: '2026-09-25' },
+];
+RULES.push({ id: 'mycheck-wallet-v3-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/[A-Za-z0-9._-]+\/static\/js\/main\.js$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/:version/static/js/main.js',
+    sources: shijiSources }, { id: 'shiji-sts-proxy-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^cdn\.shijipayment\.com$/, pathname: /^\/sts\/sts\.proxy\.v2\.1\.js$/, origin: 'https://cdn.shijipayment.com', path_pattern: '/sts/sts.proxy.v2.1.js',
+    sources: shijiSources }, { id: 'mycheck-wallet-v3-iframe-sdk', psp: 'shiji_sts', kinds: ['script'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/[A-Za-z0-9._-]+\/sdk\.js$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/:version/sdk.js',
+    sources: [{ kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/latest/sdk.js', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'The MyCheck wallet iframe integration sends the card from MyCheck\'s own frame; only the in-page wallet (main.js) is admitted.' }, { id: 'mycheck-wallet-v3-iframe', psp: 'shiji_sts', kinds: ['frame', 'iframe', 'document'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/wallet-iframe\.html$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/wallet-iframe.html',
+    sources: [{ kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/wallet-iframe.html', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'The MyCheck wallet iframe integration sends the card from MyCheck\'s own frame; only the in-page wallet (main.js) is admitted.' }, { id: 'shiji-ps-js-apm-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^cdn\.shijipayment\.com$/, pathname: /^\/libraries\/shijipayments\.latest\.min\.js$/, origin: 'https://cdn.shijipayment.com', path_pattern: '/libraries/shijipayments.latest.min.js',
+    sources: [{ kind: 'primary_source', reference: 'https://cdn.shijipayment.com/libraries/shijipayments.latest.min.js', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'Shiji\'s ps-js-apm library can take its STS key and URL from server configuration; only the MyCheck Wallet V3 path under the pinned key is admitted.' });
+// Amadeus Payment Platform (Outpayce), reviewed from Amadeus's public Checkout Web SDK (the 7.1.0
+// bundle, its form-field pages and user guide under prd.payment.amadeus.com/checkout/sdk/) and the
+// Data Collection Page script on paypages.payment.amadeus.com on 2026-09-25. The SDK loads its tunnel,
+// pan and cvv frames from the same versioned directory; the DCP page is framed from /ATPDCP/land/.
+// The processor ships dark: until the bundled catalog serves amadeus_checkout, a lone Amadeus signal
+// names the processor and stays unknown.
+const amadeusSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'amadeus-checkout-sdk-script', psp: 'amadeus_checkout', kinds: ['script'], hostname: /^prd\.payment\.amadeus\.com$/, pathname: /^\/checkout\/sdk\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/sdk-es(?:5|2015|2022)\.js$/, origin: 'https://prd.payment.amadeus.com', path_pattern: '/checkout/sdk/:version/sdk-{es5,es2015,es2022}.js',
+    sources: [amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/7.1.0/sdk-es2022.js'), amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/manifest.json')] }, { id: 'amadeus-checkout-sdk-frame', psp: 'amadeus_checkout', kinds: ['document', 'frame', 'iframe'], hostname: /^prd\.payment\.amadeus\.com$/, pathname: /^\/checkout\/sdk\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/form-fields\/(?:tunnel|pan|cvv)\.html$/, origin: 'https://prd.payment.amadeus.com', path_pattern: '/checkout/sdk/:version/form-fields/{tunnel,pan,cvv}.html',
+    sources: [amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/7.1.0/form-fields/tunnel.html'), amadeusSource('https://github.com/outpaycelab/outpayce-checkout-sdk-web/blob/main/userguide.md')] }, { id: 'amadeus-data-collection-page', psp: 'amadeus_checkout', kinds: ['document', 'frame', 'iframe'], hostname: /^paypages\.payment\.amadeus\.com$/, pathname: /^\/1ASIATP\/ATPDCP\/land\/?$/, origin: 'https://paypages.payment.amadeus.com', path_pattern: '/1ASIATP/ATPDCP/land/',
+    sources: [amadeusSource('https://paypages.payment.amadeus.com/1ASIATP/ATPDCP/static/dcppages/standard/js/standard-acb53a79a0.min.js')] });
+// Worldline Connect MyCheckout (dark: its processor declares a capability, so the bundled catalog
+// does not list it and these signals stay unknown until a client opts in). The hosted payment page
+// itself identifies the processor: /checkout/<hosted checkout> on the `payment.` subdomain of a
+// data center (pay1 Europe, pay2 US), and its card form's action, /checkout. Read from Worldline's
+// template bundle and a recorded MyCheckout card page (Aveda Belgium, Sep 2025).
+const worldlineSources = [
+    { kind: 'primary_source', reference: 'https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js', reviewed_on: '2026-09-30' },
+    { kind: 'official_documentation', reference: 'https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/', reviewed_on: '2026-09-30' },
+];
+RULES.push({ id: 'worldline-mycheckout-page', psp: 'worldline_mycheckout', kinds: ['document', 'frame', 'iframe'], hostname: /^payment\.pay1\.checkout\.worldline-solutions\.com$/,
+    pathname: /^\/checkout\/(?:payment-product-details\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$/,
+    origin: 'https://payment.pay1.checkout.worldline-solutions.com', path_pattern: '/checkout/{payment-product-details/}:hosted_checkout', sources: worldlineSources }, { id: 'worldline-mycheckout-card-form', psp: 'worldline_mycheckout', kinds: ['form'], hostname: /^payment\.pay1\.checkout\.worldline-solutions\.com$/, pathname: /^\/checkout$/,
+    origin: 'https://payment.pay1.checkout.worldline-solutions.com', path_pattern: '/checkout', sources: worldlineSources });
+// A processor that ships dark (its definition declares a capability) is left out of the bundled
+// catalog. Datatrans's discovery rules wait with it: they join RULES only once KNOWN_PSPS, the
+// bundled catalog's processors, lists its psp. Until then its assets are not evidence, so a page
+// that loads them, alone or beside another processor's SDK, reads exactly as it did before the
+// processor existed. (The dark GMO, CyberSource Flex, Juspay, Pelecard, ACI, CreditGuard,
+// Primer, Payrails, Elavon Converge, Worldpay eProtect, WSPay, Shiji STS, Amadeus and Worldline
+// MyCheckout rules above join RULES now, and their signals stay unknown.)
+const SERVED_ONLY_RULES = [];
+// Datatrans / PCI Proxy Secure Fields 2.0.0, reviewed from Datatrans's public library and iframe
+// script (pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.js and .min.js, field.js 3.24.602)
+// and the PCI Proxy docs on 2026-09-25. The library loads the card and CVV iframes from the
+// paymentField document on the same host. Dark behind datatrans_secure_fields_tokenize.
+const datatransSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+for (const [suffix, hostname, origin] of [['', /^pay\.datatrans\.com$/, 'https://pay.datatrans.com'],
+    ['-sandbox', /^pay\.sandbox\.datatrans\.com$/, 'https://pay.sandbox.datatrans.com']]) {
+    SERVED_ONLY_RULES.push({ id: `datatrans-secure-fields-script${suffix}`, psp: 'datatrans', kinds: ['script'], hostname, pathname: /^\/upp\/payment\/js\/secure-fields-2\.0\.0(?:\.min)?\.js$/, origin, path_pattern: '/upp/payment/js/secure-fields-2.0.0{,.min}.js',
+        sources: [datatransSource('https://pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.js'), datatransSource('https://docs.pci-proxy.com/docs/secure-fields-quick-start')] }, { id: `datatrans-secure-fields-frame${suffix}`, psp: 'datatrans', kinds: ['document', 'frame', 'iframe'], hostname, pathname: /^\/upp\/payment\/SecureFields\/paymentField$/, origin, path_pattern: '/upp/payment/SecureFields/paymentField',
+        sources: [datatransSource('https://pay.datatrans.com/upp/payment/SecureFields/field.js'), datatransSource('https://docs.datatrans.ch/docs/secure-fields')] });
+}
+RULES.push(...SERVED_ONLY_RULES.filter(rule => KNOWN_PSPS.includes(rule.psp)));
 // Keep sandbox evidence truthful instead of labelling it with a production origin.
 for (const [baseId, suffix, hostname, origin] of [
     ['gmo-mp-token-script', 'test', /^stg\.static\.mul-pay\.jp$/, 'https://stg.static.mul-pay.jp'],
@@ -106,6 +289,23 @@ for (const [baseId, suffix, hostname, origin] of [
     ['gmo-link-hosted-page', 'test', /^pt01\.mul-pay\.jp$/, 'https://pt01.mul-pay.jp'],
     ['cybersource-flex-microform-script', 'test', /^testflex\.cybersource\.com$/, 'https://testflex.cybersource.com'],
     ['cybersource-flex-microform-field', 'test', /^testflex\.cybersource\.com$/, 'https://testflex.cybersource.com'],
+    ['worldpay-eprotect-js-api', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['worldpay-eprotect-iframe-client', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['worldpay-eprotect-payframe', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['mycheck-wallet-v3-script', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-script', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    ['shiji-sts-proxy-script', 'dev', /^cdn\.shijipayment\.dev$/, 'https://cdn.shijipayment.dev'],
+    ['mycheck-wallet-v3-iframe-sdk', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe-sdk', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    // MyCheckout's US data center and the pre-production twins of both.
+    ['worldline-mycheckout-page', 'pay2', /^payment\.pay2\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-page', 'preprod', /^payment\.pay1\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay1.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-page', 'pay2-preprod', /^payment\.pay2\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'pay2', /^payment\.pay2\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'preprod', /^payment\.pay1\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay1.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'pay2-preprod', /^payment\.pay2\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.preprod.checkout.worldline-solutions.com'],
     ['square-web-sdk', 'sandbox', /^sandbox\.web\.squarecdn\.com$/, 'https://sandbox.web.squarecdn.com'],
     ['paysafe-js', 'test', /^hosted\.test\.paysafe\.com$/, 'https://hosted.test.paysafe.com'],
     ['worldpay-checkout-sdk', 'try', /^try\.access\.worldpay\.com$/, 'https://try.access.worldpay.com'],
@@ -115,6 +315,11 @@ for (const [baseId, suffix, hostname, origin] of [
     ['authorize-net-sim-hosted-form', 'secure2', /^secure2\.authorize\.net$/, 'https://secure2.authorize.net'],
     ['worldpay-hosted-payment-page', 'test', /^secure-test\.worldpay\.com$/, 'https://secure-test.worldpay.com'],
     ['rapyd-hosted-checkout-page', 'sandbox', /^sandboxcheckout\.rapyd\.net$/, 'https://sandboxcheckout.rapyd.net'],
+    // The pdt and uat copies of the SDK are byte-identical to prd.
+    ['amadeus-checkout-sdk-script', 'pdt', /^pdt\.payment\.amadeus\.com$/, 'https://pdt.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-script', 'uat', /^uat\.payment\.amadeus\.com$/, 'https://uat.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-frame', 'pdt', /^pdt\.payment\.amadeus\.com$/, 'https://pdt.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-frame', 'uat', /^uat\.payment\.amadeus\.com$/, 'https://uat.payment.amadeus.com'],
     // Adyen's regional live hosts (docs.adyen.com/development-resources/live-endpoints/).
     ['adyen-secured-fields-live', 'us', /^checkoutshopper-live-us\.adyen\.com$/, 'https://checkoutshopper-live-us.adyen.com'],
     ['adyen-secured-fields-live', 'au', /^checkoutshopper-live-au\.adyen\.com$/, 'https://checkoutshopper-live-au.adyen.com'],
@@ -125,6 +330,40 @@ for (const [baseId, suffix, hostname, origin] of [
     ['fiserv-commercehub-payment-fields', 'cert', /^commercehub-checkout-cert\.fiservapps\.com$/, 'https://commercehub-checkout-cert.fiservapps.com'],
     ['fiserv-commercehub-checkout-script', 'cert', /^commercehub-checkout-cert\.fiservapps\.com$/, 'https://commercehub-checkout-cert.fiservapps.com'],
     ['fiserv-secure-data-capture-frame', 'cert', /^commercehub-secure-data-capture-cert\.fiservapps\.com$/, 'https://commercehub-secure-data-capture-cert.fiservapps.com'],
+    // NMI's test platform (integration guide AE, "Form creation").
+    ['ekashu-hosted-payment-page', 'test', /^test\.ekashu\.com$/, 'https://test.ekashu.com'],
+    // Verifone's other regions and its two sandboxes serve the same verifone.js.
+    ['verifone-secure-card-capture-script', 'emea', /^emea\.jsclient\.verifone\.cloud$/, 'https://emea.jsclient.verifone.cloud'],
+    ['verifone-secure-card-capture-script', 'uscst', /^uscst\.jsclient\.vficloud\.net$/, 'https://uscst.jsclient.vficloud.net'],
+    ['verifone-secure-card-capture-script', 'cst', /^cst\.jsclient\.vficloud\.net$/, 'https://cst.jsclient.vficloud.net'],
+    // Juspay's sandbox, and api.juspay.io, the host the Session API's own sample payment link uses.
+    ['juspay-hypercheckout-payment-page', 'sandbox', /^sandbox\.juspay\.in$/, 'https://sandbox.juspay.in'],
+    ['juspay-hypercheckout-payment-page', 'io', /^api\.juspay\.io$/, 'https://api.juspay.io'],
+    // Older Pelecard terminals serve the same page and scripts from gateway20 (live and test terminals alike).
+    ['pelecard-payment-page', 'gateway20', /^gateway20\.pelecard\.biz$/, 'https://gateway20.pelecard.biz'],
+    ['pelecard-payment-script', 'gateway20', /^gateway20\.pelecard\.biz$/, 'https://gateway20.pelecard.biz'],
+    // ACI serves the same widget from its second live host and its two INTEGRATOR_TEST hosts.
+    ['aci-copyandpay-widget-script', 'oppwa', /^oppwa\.com$/, 'https://oppwa.com'],
+    ['aci-copyandpay-widget-script', 'eu-test', /^eu-test\.oppwa\.com$/, 'https://eu-test.oppwa.com'],
+    ['aci-copyandpay-widget-script', 'test', /^test\.oppwa\.com$/, 'https://test.oppwa.com'],
+    ['aci-copyandpay-card-frame', 'oppwa', /^oppwa\.com$/, 'https://oppwa.com'],
+    ['aci-copyandpay-card-frame', 'eu-test', /^eu-test\.oppwa\.com$/, 'https://eu-test.oppwa.com'],
+    ['aci-copyandpay-card-frame', 'test', /^test\.oppwa\.com$/, 'https://test.oppwa.com'],
+    // CreditGuard's second production PPS host and its UAT host.
+    ['creditguard-pps-hosted-page', 'pps2', /^pps2\.creditguard\.co\.il$/, 'https://pps2.creditguard.co.il'],
+    ['creditguard-pps-template-script', 'pps2', /^pps2\.creditguard\.co\.il$/, 'https://pps2.creditguard.co.il'],
+    ['creditguard-pps-hosted-page', 'uat', /^ppsuat\.creditguard\.co\.il$/, 'https://ppsuat.creditguard.co.il'],
+    ['creditguard-pps-template-script', 'uat', /^ppsuat\.creditguard\.co\.il$/, 'https://ppsuat.creditguard.co.il'],
+    // Converge's demo environment serves the same page and bundles.
+    ['elavon-converge-hosted-payment-page', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-hpp-bundle', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-lightbox', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-checkout-js', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['wspay-components-script', 'test', /^proxy-test\.wspay\.biz$/, 'https://proxy-test.wspay.biz'],
+    ['wspay-components-card-frame', 'test', /^proxy-test\.wspay\.biz$/, 'https://proxy-test.wspay.biz'],
+    ['wspay-form-hosted-page', 'test', /^formtest\.wspay\.biz$/, 'https://formtest.wspay.biz'],
+    ['monri-components-script', 'test', /^ipgtest\.monri\.com$/, 'https://ipgtest.monri.com'],
+    ['monri-components-card-frame', 'test', /^ipgtest\.monri\.com$/, 'https://ipgtest.monri.com'],
 ]) {
     RULES.push({ ...RULES.find(rule => rule.id === baseId), id: `${baseId}-${suffix}`, hostname, origin });
 }
@@ -577,14 +816,14 @@ export function getCheckoutPreflightSchemas() {
             schema_version: { const: 1 }, profile_version: text, catalog_version: { const: CHECKOUT_PREFLIGHT_CATALOG_VERSION }, integration,
             processor_entries: { type: 'array', maxItems: 256, items: {
                     type: 'object', additionalProperties: false, required: ['psp', 'mode', 'scenario', 'status'], properties: {
-                        psp: { enum: KNOWN_PSPS }, mode: { enum: ['token', 'cse', 'hosted_form'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
+                        psp: { enum: KNOWN_PSPS }, mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
                         limitations: { type: 'array', maxItems: 16, items: { type: 'string', maxLength: 256, pattern: '^[^\\u0000-\\u001f]*$' } },
                     },
                 } },
             expires_at: { type: 'string', format: 'date-time', maxLength: 40 }, entries: { type: 'array', maxItems: 256, items: {
                     type: 'object', additionalProperties: false, required: ['flow', 'operation', 'operation_version', 'mode', 'scenario', 'status'], properties: {
                         flow: { enum: FLOWS.map(flow => flow.id) }, operation: { enum: FLOWS.map(flow => flow.operation) }, operation_version: { const: 1 },
-                        mode: { enum: ['token', 'cse', 'hosted_form'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
+                        mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
                         limitations: { type: 'array', maxItems: 16, items: { type: 'string', maxLength: 256, pattern: '^[^\\u0000-\\u001f]*$' } },
                     },
                 } },
@@ -598,7 +837,7 @@ export function getCheckoutPreflightSchemas() {
     const result = { $schema: 'https://json-schema.org/draft/2020-12/schema', type: 'object', additionalProperties: false,
         required: ['schema_version', 'catalog_version', 'integration', 'scenario', 'scenario_defaulted', 'psp', 'flow', 'mode', 'status', 'support_scope', 'checkout_flow_status', 'candidates', 'reason_codes', 'limitations', 'missing_evidence', 'observation', 'scope', 'merchant_confirmation_required'], properties: {
             schema_version: { const: 1 }, catalog_version: { const: CHECKOUT_PREFLIGHT_CATALOG_VERSION }, integration,
-            scenario: { enum: SCENARIOS }, scenario_defaulted: { type: 'boolean' }, psp: { type: ['string', 'null'] }, flow: { type: ['string', 'null'] }, mode: { enum: ['token', 'cse', 'hosted_form', null] },
+            scenario: { enum: SCENARIOS }, scenario_defaulted: { type: 'boolean' }, psp: { type: ['string', 'null'] }, flow: { type: ['string', 'null'] }, mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt', null] },
             support_scope: { enum: ['processor_integration', 'checkout_flow', null] }, checkout_flow_status: { enum: ['identified', 'unknown', 'ambiguous'] },
             status: { enum: ['supported', 'unsupported', 'unknown'] }, candidates: { type: 'array', items: { type: 'object', additionalProperties: false, required: ['psp', 'relevance', 'evidence'], properties: {
                         psp: { type: 'string' }, relevance: { enum: ['active', 'undetermined'] }, evidence: { type: 'array', items: evidence },

package/dist/preparation.d.ts

@@ -1,21 +1,30 @@
 import { type PreparedCheckout } from './client.js';
 import type { AttachOptions } from './cdp.js';
 import type { CheckoutLifecycle } from './lifecycle.js';
+import type { LoadedCardMicroform } from './cybersource-flex.js';
 /** A local, one-use rendezvous. It never starts or retries a merchant request. */
 export declare class PreparationGate {
     private readonly opts;
     private readonly lifecycle;
     private readonly readDocumentUrl;
+    private readonly readMicroform?;
     private state;
     private observedRequest;
     private documentUrl;
     private prepared?;
     private stop;
     private expiryTimer?;
-    constructor(opts: AttachOptions, lifecycle: CheckoutLifecycle, readDocumentUrl: () => Promise<string>);
+    /**
+     * `readMicroform`: the adapter's read of the card Microform the page loaded (cybersource-flex.ts
+     * loadedCardMicroform), for prepare({ psp: 'cybersource_flex', tokenizeBeforePay: true }).
+     */
+    constructor(opts: AttachOptions, lifecycle: CheckoutLifecycle, readDocumentUrl: () => Promise<string>, readMicroform?: (() => LoadedCardMicroform | Promise<LoadedCardMicroform>) | undefined);
     private prepare;
-    /** Called for every recognized card mutation, before any await or local retry guard. */
-    claim(requestUrl: string, requestBody?: string | null, requestHeaders?: Record<string, string>): PreparedCheckout | undefined;
+    /**
+     * Called for every recognized card request, before any await or local retry guard. The request's
+     * own method is what binds: a POST for most processors, the registration GET for Worldpay eProtect.
+     */
+    claim(requestUrl: string, requestMethod: string, requestBody?: string | null, requestHeaders?: Record<string, string>): PreparedCheckout | undefined;
     assertDocument(): Promise<void>;
     private readDocument;
     isEngaged(): boolean;

package/dist/preparation.js

@@ -1,21 +1,27 @@
 import { CheckoutPreparationError } from './client.js';
-import { validAmountInput } from './client.js';
-import { matchesPreparation, validPreparationEnvironment, preparationEndpoint } from './prepared-processor.js';
+import { amountRefusal, validAmountInput } from './client.js';
+import { matchesPreparation, validPreparationEnvironment, preparationEndpoint, preparationBindsByShape, preparationRequestMethod, preparedRequestRefusal } from './prepared-processor.js';
 /** A local, one-use rendezvous. It never starts or retries a merchant request. */
 export class PreparationGate {
     opts;
     lifecycle;
     readDocumentUrl;
+    readMicroform;
     state = 'unused';
     observedRequest = false;
     documentUrl = '';
     prepared;
     stop = new AbortController();
     expiryTimer;
-    constructor(opts, lifecycle, readDocumentUrl) {
+    /**
+     * `readMicroform`: the adapter's read of the card Microform the page loaded (cybersource-flex.ts
+     * loadedCardMicroform), for prepare({ psp: 'cybersource_flex', tokenizeBeforePay: true }).
+     */
+    constructor(opts, lifecycle, readDocumentUrl, readMicroform) {
         this.opts = opts;
         this.lifecycle = lifecycle;
         this.readDocumentUrl = readDocumentUrl;
+        this.readMicroform = readMicroform;
         lifecycle.setPreparationHandler(options => this.prepare(options));
         lifecycle.abort.signal.addEventListener('abort', () => this.invalidate('cancelled'), { once: true });
     }
@@ -39,9 +45,35 @@ export class PreparationGate {
         try {
             if (!options || !validPreparationEnvironment(options.psp, options.environment))
                 throw new CheckoutPreparationError(null, 'unsupported_processor');
+            // CyberSource Flex, tokenized before Pay: the preparation carries the capture context and the
+            // fields of the card Microform this page loaded, so the cardholder's device seals the card and
+            // gets CyberSource's token when it approves. A page that races createToken against seconds
+            // (Alaska Airlines' flight checkout gives it three) is then answered at once after Pay.
+            let cybersourceFlex;
+            if (options.tokenizeBeforePay !== undefined && typeof options.tokenizeBeforePay !== 'boolean') {
+                throw new CheckoutPreparationError(null, 'tokenize_before_pay_invalid');
+            }
+            if (options.tokenizeBeforePay) {
+                if (options.psp !== 'cybersource_flex')
+                    throw new CheckoutPreparationError(null, 'unsupported_processor');
+                const loaded = (await this.readMicroform?.()) ?? { ok: false, reason: 'microform_not_loaded' };
+                if (!loaded.ok)
+                    throw new CheckoutPreparationError(null, loaded.reason);
+                cybersourceFlex = { captureContext: loaded.captureContext, microform: { version: loaded.microform.version, fields: [...loaded.microform.fields] } };
+            }
             // A Fiserv checkout's merchantProfile names a key pin, which prepareCheckout checks: its
             // capture endpoint is checked below like any processor-hosted checkout's.
-            if (options.merchantProfile !== undefined && options.psp !== 'fiserv') {
+            if (options.psp === 'verifone') {
+                // A Verifone merchant's own server: a profile the last sync served, which this
+                // attachment pauses, enabled for this client.
+                const profile = typeof this.opts.vault.verifoneProfile === 'function' && typeof options.merchantProfile === 'string'
+                    ? this.opts.vault.verifoneProfile(options.merchantProfile) : null;
+                if (!profile)
+                    throw new CheckoutPreparationError(null, 'processor_interception_unavailable');
+                if (profile.status !== 'enabled')
+                    throw new CheckoutPreparationError(null, 'unsupported_checkout');
+            }
+            else if (options.merchantProfile !== undefined && options.psp !== 'fiserv') {
                 // An Adyen merchant's own endpoint: a profile this build reviewed, which
                 // this attachment pauses, and one Agentcard turned on for this client.
                 const profile = typeof this.opts.vault.merchantProfile === 'function' && typeof options.merchantProfile === 'string'
@@ -55,11 +87,19 @@ export class PreparationGate {
             }
             else {
                 const tokenizer = preparationEndpoint(options.psp, options.environment);
-                if (!this.opts.vault.isCardRequest(tokenizer, 'POST'))
+                // ACI's card-number request names a checkout id the merchant mints at Pay time, and a GET card
+                // request (Worldpay eProtect) is recognized by its whole query, which the page has not written
+                // yet, so no prepared URL is ever their card request: ask whether the registry serves the
+                // processor at all instead. A preparation the adapters would never pause could never bind.
+                const interceptable = preparationBindsByShape(options.psp) || preparationRequestMethod(options.psp) === 'GET'
+                    ? typeof this.opts.vault.recognizesProcessor === 'function' && this.opts.vault.recognizesProcessor(options.psp)
+                    : this.opts.vault.isCardRequest(tokenizer, 'POST');
+                if (!interceptable)
                     throw new CheckoutPreparationError(null, 'processor_interception_unavailable');
             }
-            if (!validAmountInput(this.opts.amount) || this.opts.amount === 0 || !/^[a-z]{3}$/i.test(this.opts.currency ?? ''))
-                throw new CheckoutPreparationError(null, 'amount_required');
+            if (!validAmountInput(this.opts.amount) || this.opts.amount === 0 || !/^[a-z]{3}$/i.test(this.opts.currency ?? '')) {
+                throw new CheckoutPreparationError(null, 'amount_required', undefined, this.opts.amount != null && !validAmountInput(this.opts.amount) ? amountRefusal(this.opts.amount, this.opts.currency) : undefined);
+            }
             if (signal.aborted)
                 throw new CheckoutPreparationError(null, 'cancelled');
             this.documentUrl = await this.readDocument();
@@ -70,6 +110,7 @@ export class PreparationGate {
                 ...options, user: this.opts.user, merchant: this.opts.merchant,
                 amount: this.opts.amount, currency: this.opts.currency, cardId: this.opts.cardId,
                 merchantOrigin: page.origin, checkoutKey: crypto.randomUUID(), timeoutMs: this.opts.timeoutMs, signal,
+                ...(cybersourceFlex ? { cybersourceFlex } : {}),
                 onPreparationCreated: id => this.lifecycle.preparationCreated(id),
                 onApprovalUrl: url => {
                     if (!signal.aborted) {
@@ -83,8 +124,10 @@ export class PreparationGate {
             });
             this.prepared = prepared;
             // A Fiserv preparation also names the key pin the cardholder approves (merchantProfile).
+            // One that tokenizes before Pay names the capture context its cardholder approved under.
             if (prepared.psp !== options.psp || prepared.environment !== options.environment
-                || prepared.merchantProfile !== options.merchantProfile)
+                || prepared.merchantProfile !== options.merchantProfile
+                || (prepared.cybersourceFlex?.captureContext ?? null) !== (cybersourceFlex?.captureContext ?? null))
                 throw new CheckoutPreparationError(prepared.id, 'checkout_changed');
             if (signal.aborted || this.state !== 'preparing') {
                 void this.cancelThenObserve(prepared.id, 'cancelled');
@@ -109,8 +152,11 @@ export class PreparationGate {
         }
         // Keep the signal listener after ready: caller cancellation retires the handle too.
     }
-    /** Called for every recognized card mutation, before any await or local retry guard. */
-    claim(requestUrl, requestBody, requestHeaders) {
+    /**
+     * Called for every recognized card request, before any await or local retry guard. The request's
+     * own method is what binds: a POST for most processors, the registration GET for Worldpay eProtect.
+     */
+    claim(requestUrl, requestMethod, requestBody, requestHeaders) {
         this.observedRequest = true;
         if (this.state === 'unused')
             return undefined;
@@ -121,8 +167,13 @@ export class PreparationGate {
         const prepared = this.prepared;
         // A merchant-hosted preparation claims only its profile's reviewed card request.
         // A Fiserv preparation claims only a capture under the key pin it names.
-        if (Date.parse(prepared.expiresAt) <= Date.now() || !matchesPreparation(prepared, requestUrl, 'POST', requestBody, requestHeaders)) {
-            const reason = Date.parse(prepared.expiresAt) <= Date.now() ? 'expired' : 'checkout_changed';
+        // A CreditGuard preparation claims only a submit to the page it framed.
+        // A Worldpay eProtect preparation claims only its registration GET naming the paypageId it carries.
+        if (Date.parse(prepared.expiresAt) <= Date.now() || !matchesPreparation(prepared, requestUrl, requestMethod, requestBody, requestHeaders)) {
+            // An Amadeus request payment-core refuses names its own reason (preparedRequestRefusal), so
+            // Air France's split expiry reads amadeus_merchant_held_expiry rather than a changed checkout.
+            const reason = Date.parse(prepared.expiresAt) <= Date.now() ? 'expired'
+                : preparedRequestRefusal(prepared.psp, prepared.environment, requestUrl, requestBody, requestHeaders, prepared.merchantOrigin);
             this.invalidate(reason);
             throw new CheckoutPreparationError(prepared.id, reason);
         }